diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2025-07-23 15:31:23 +0200 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2025-07-23 16:03:53 +0200 |
| commit | 3cf610be3a863f397600f496f1b86c0e050d8e78 (patch) | |
| tree | 28d3760d3935d202e060955a8bb4a5a8664ad0c8 /files/etc/systemd/system/webmap-raster@.service | |
| parent | 4dfc85d182448defb8c1e180e413d4df6045e377 (diff) | |
webmap-import: Add support for raster export to COG.
Diffstat (limited to 'files/etc/systemd/system/webmap-raster@.service')
| -rw-r--r-- | files/etc/systemd/system/webmap-raster@.service | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/files/etc/systemd/system/webmap-raster@.service b/files/etc/systemd/system/webmap-raster@.service new file mode 100644 index 0000000..3362d5e --- /dev/null +++ b/files/etc/systemd/system/webmap-raster@.service @@ -0,0 +1,37 @@ +[Unit] +Description=Webmap updater service (export ‘%I’ to COG) +After=webmap-update@%i.target +After=webmap-download@%i.service +Upholds=webmap-update@%i.target + +[Service] +User=_webmap +Group=_webmap + +Nice=15 +IOSchedulingClass=idle + +Type=oneshot +ExecStart=/usr/local/bin/webmap-import \ + --cachedir=%C/webmap \ + --lockfile=%t/lock/webmap/lock \ + --lockdir-sources=%t/lock/webmap/cache \ + --rasterdir=/var/www/webmap/raster/%I \ + --metadata-compress \ + -- %I + +# Hardening +NoNewPrivileges=yes +ProtectHome=yes +ProtectSystem=strict +PrivateDevices=yes +ProtectControlGroups=yes +ProtectKernelModules=yes +ProtectKernelTunables=yes +RestrictAddressFamilies= +ReadWritePaths=%t/lock/webmap +ReadWritePaths=/var/www/webmap/raster +PrivateTmp=yes + +[Install] +WantedBy=webmap-update@%i.target |